← Back to Skills Marketplace
charlie-morrison

Rollup Config Validator

by charlie-morrison · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
100
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install rollup-config-validator
Description
Validate Rollup config files (rollup.config.js/mjs/ts) for output format conflicts, plugin ordering issues, deprecated options, and best practices. Use when...
Usage Guidance
The tool appears to do what it says: a local Python script that validates Rollup config JSON. Before installing or running it: 1) Inspect the complete scripts/rollup_config_validator.py file yourself (the provided review input was truncated — ensure there are no hidden network calls, subprocess invocations, or obfuscated code). 2) Be cautious using the suggested node -e require(...) to produce JSON from rollup.config.js — that will execute the config file and any code it imports, which can run arbitrary side effects. Only run that step on code you trust or inside an isolated environment/container. 3) Run the validator on non-sensitive machines or in CI with limited permissions, and consider opening the Python file in a text editor to verify it only reads/parses the given file and prints results (no outbound network or credential access). If you want higher assurance, request the full script for review or run it in a sandboxed container first.
Capability Analysis
Type: OpenClaw Skill Name: rollup-config-validator Version: 1.0.0 The rollup-config-validator skill bundle is a utility for linting and validating Rollup configuration files. The core logic in scripts/rollup_config_validator.py uses the Python standard library to parse JSON-formatted configurations and check them against a set of structural and best-practice rules. No evidence of data exfiltration, malicious execution, or prompt injection was found; the tool's behavior is entirely consistent with its stated purpose.
Capability Tags
crypto
Capability Assessment
Purpose & Capability
Name/description match the included Python validator: it validates Rollup config JSON for output, plugin ordering, deprecated plugins, treeshake, and best practices. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
SKILL.md instructs users to convert JavaScript Rollup configs to JSON using node -e "require('./rollup.config.js')...". That approach requires executing the project's rollup.config.js which may run arbitrary JavaScript (init code, side effects, build-time tasks). While necessary to obtain a config object from a JS file, it is a security risk when run against untrusted code. The Python validator itself reads files and analyzes JSON only.
Install Mechanism
No install spec; this is an instruction + shipped Python script that relies on Python stdlib. Nothing is downloaded or extracted at install time.
Credentials
No environment variables, credentials, or config paths are requested. The code shown reads only the supplied config file path and uses standard library APIs.
Persistence & Privilege
Skill is not always-enabled, does not request elevated/system-wide persistence, and does not modify other skills. It runs as an on-demand local script.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install rollup-config-validator
  3. After installation, invoke the skill by name or use /rollup-config-validator
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: 22+ rules for Rollup bundler config validation
Metadata
Slug rollup-config-validator
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Rollup Config Validator?

Validate Rollup config files (rollup.config.js/mjs/ts) for output format conflicts, plugin ordering issues, deprecated options, and best practices. Use when... It is an AI Agent Skill for Claude Code / OpenClaw, with 100 downloads so far.

How do I install Rollup Config Validator?

Run "/install rollup-config-validator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Rollup Config Validator free?

Yes, Rollup Config Validator is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Rollup Config Validator support?

Rollup Config Validator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Rollup Config Validator?

It is built and maintained by charlie-morrison (@charlie-morrison); the current version is v1.0.0.

💬 Comments